Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236731 10 危険 phppc - phpPC における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7136 2012-12-20 18:18 2007-03-6 Show GitHub Exploit DB Packet Storm
236732 7.5 危険 salims softhouse - forum/forum.php JAF CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7128 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236733 6.8 警告 salims softhouse - JAF CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7127 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236734 7.5 危険 phpgiggle - comscripts.com 上で配布されている J. He PHPGiggle における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7119 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236735 7.5 危険 PHPKIT - PHPKit における SQL インジェクションの脆弱性 - CVE-2006-7115 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236736 5 警告 planerd.net - P-News における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7114 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236737 7.5 危険 planerd.net - P-News における任意のコードをアップロードおよび実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2006-7113 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
236738 7.5 危険 powerphlogger - Power Phlogger の config.inc.php3 における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7106 2012-12-20 18:18 2007-03-3 Show GitHub Exploit DB Packet Storm
236739 7.5 危険 phpwind - PHPWind の admin.php における SQL インジェクションの脆弱性 - CVE-2006-7101 2012-12-20 18:18 2007-03-3 Show GitHub Exploit DB Packet Storm
236740 6.8 警告 phpBB - phpBB Insert User の includes/functions_mod_user.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7100 2012-12-20 18:18 2007-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAut… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-13524 2026-07-1 03:16 2026-06-29 Show GitHub Exploit DB Packet Storm
42 8.8 HIGH
Network 		- - A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer o… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-13518 2026-07-1 03:16 2026-06-29 Show GitHub Exploit DB Packet Storm
43 6.3 MEDIUM
Network 		- - A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_ma… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-13512 2026-07-1 03:16 2026-06-29 Show GitHub Exploit DB Packet Storm
44 3.5 LOW
Network 		- - A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation lead… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-13504 2026-07-1 03:16 2026-06-29 Show GitHub Exploit DB Packet Storm
45 6.5 MEDIUM
Network 		- - The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the ne… New CWE-416
 Use After Free 		CVE-2026-10655 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
46 3.1 LOW
Adjacent 		- - A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect. When the local device has initi… New CWE-362
Race Condition 		CVE-2026-10654 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
47 6.4 MEDIUM
Adjacent 		- - The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of each variable/heap data allocation … New CWE-415
 Double Free 		CVE-2026-10653 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
48 4.8 MEDIUM
Network 		- - Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlength) and accepted any at… New CWE-125
Out-of-bounds Read 		CVE-2026-10652 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
49 5.4 MEDIUM
Network 		- - SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue. New CWE-89
SQL Injection 		CVE-2025-53648 2026-07-1 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
50 7.5 HIGH
Network 		ibm i IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted reques… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-10852 2026-07-1 03:06 2026-06-23 Show GitHub Exploit DB Packet Storm